WP Associate Post R2
Healthy: vulnerability published 7 Oct 2026, fixed in 5.0.2.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 7 Oct 2026, fixed in 5.0.2. Update to version 5.0.2 or later.7 Oct 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| satonyan | 22 Jun 2018 to 23 Mar 2023, 41 commits |
|---|---|
| delightstar | 23 Jun 2023 to 30 Sep 2026, 3 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 35 days ago
- Releases, 24 months
- 2
- Tested up to
- 7.1 current
- Requires PHP
- 7.3 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 1 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 1 |
| Q4 2026 | 0 |
Last release 30 Sep 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 7 Oct 2026 | WP Associate Post R2 <= 5.0.1 - Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 5.0.1 | 5.0.2 | 0 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 0.0 from 0 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 0 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
2,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 24 |
|---|---|
| 11 May 2026 | 31 |
| 18 May 2026 | 37 |
| 25 May 2026 | 46 |
| 1 Jun 2026 | 40 |
| 8 Jun 2026 | 39 |
| 15 Jun 2026 | 31 |
| 22 Jun 2026 | 30 |
| 29 Jun 2026 | 32 |
| 6 Jul 2026 | 31 |
| 13 Jul 2026 | 52 |
| 20 Jul 2026 | 63 |
| 27 Jul 2026 | 51 |
| 3 Aug 2026 | 61 |
| 10 Aug 2026 | 84 |
| 17 Aug 2026 | 60 |
| 24 Aug 2026 | 51 |
| 31 Aug 2026 | 44 |
| 7 Sep 2026 | 61 |
| 14 Sep 2026 | 36 |
| 21 Sep 2026 | 4 |
| 28 Sep 2026 | 14 |
| 5 Oct 2026 | 1,088 |
| 12 Oct 2026 | 165 |
| 19 Oct 2026 | 423 |
| 26 Oct 2026 | 197 |
| 2 Nov 2026 | 24 |
Weekly downloads over the last 4 weeks are 94% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 5.0.2 |
|---|---|
| Author | Delight Star Inc. |
| Added | 22 Jun 2018 |
| Last updated | 30 Sep 2026 |
| Active installs | 2,000+ |
| Requires WordPress | 5.8 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.3 |
| Category | E-commerce & Shopping |
| Tags | media, yahoo, amazon, rakuten, affiliate |
Other plugins by this author: Multiple Images Field
Questions
Is WP Associate Post R2 still maintained?
WP Associate Post R2 was last updated on 30 Sep 2026. Its Canary status is Healthy.
Is WP Associate Post R2 safe?
WP Associate Post R2 has no open unpatched vulnerabilities on record. 1 vulnerability was published in the last 24 months. Its Canary status is Healthy.
Who owns WP Associate Post R2?
The wordpress.org author is Delight Star Inc.. Recent committers: delightstar, satonyan, plugin-master. We have recorded no ownership change.
What can I use instead of WP Associate Post R2?
Plugins in the same category with a higher Canary Score: Easy Affiliate Links, WP Affiliate Disclosure, BetterLinks - Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP, Lasso Lite - Affiliate Link Manager, URL Shortener & Link Tracking, Cloak Affiliate Links for WooCommerce.